CyberRota Analysis
AI-GeneratedThe datamodel-code-generator prior to version 0.63.0 is vulnerable due to improper handling of Authorization, Cookie, and Proxy-Authorization headers during cross-origin redirects, which can lead to credential leakage between different schema hosts. Although the severity is rated low, organizations using this tool should prioritize upgrading to version 0.63.0 to mitigate potential security risks associated with unauthorized access to sensitive information. This is particularly relevant for developers and teams leveraging the generator for Python data model creation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, allowing credentials scoped to one schema host to be leaked to another redirect target. This issue is fixed in version 0.63.0.